KB928090, MS07-016, Installing IE7-KB928090-WindowsXP-x86-enu.exe Patch using Desktop Central

How to?

Support

Download

Website

Forums

Live Demo

Patch Management Software

Desktop Central helps administrators to automate patch deployment of both Microsoft and Non-Microsoft Applications from a central point.

Internet Explorer 7 Patch Details

Internet Explorer 7 Patches

Patch Name :

IE7-KB928090-WindowsXP-x86-enu.exe

Patch Description :

Cumulative Security Update for Internet Explorer 7 for Windows XP (KB972260)

Bulletin Id :

MS07-016

Bulletin Title :

Cumulative Security Update for Internet Explorer (928090)

KnowledgeBase :

928090

Severity :

Important

Location Path :

IE7-KB928090-WindowsXP-x86-enu.exe

Bulletin Summary:

COM Object Instantiation Memory Corruption Vulnerability - CVE-2006-4697:
A remote code execution vulnerability exists in the way Internet Explorer instantiates COM objects that are not intended to be instantiated in Internet Explorer. An attacker could exploit the vulnerability by constructing a specially crafted Web page that could potentially allow remote code execution if a user viewed the Web page. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

COM Object Instantiation Memory Corruption Vulnerability - CVE-2007-0219:
A remote code execution vulnerability exists in the way Internet Explorer instantiates COM objects that are not intended to be instantiated in Internet Explorer. An attacker could exploit the vulnerability by constructing a specially crafted Web page that could potentially allow remote code execution if a user viewed the Web page. An attacker who successfully exploited this vulnerability could take complete control of an affected system.

FTP Server Response Parsing Memory Corruption Vulnerability - CVE-2007-0217:
A remote code execution vulnerability exists in the way Internet Explorer interprets certain responses from FTP servers. An attacker could exploit the vulnerability by sending specially crafted FTP responses in an FTP session to the FTP client included in Internet Explorer. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Superceding Bulletin Id :

MS07-027

Patch Release Date :

Feb 13, 2007

CVE Id :

CVE-2007-0217

Affected Product Information

Product Name	Service Pack Name
Internet Explorer 7	Internet Explorer 7 Gold

File changes

File Path	Version
%windir%\system32\Advpack.dll	7.0.6000.16414
%windir%\system32\Corpol.dll	7.0.6000.16414
%windir%\system32\Extmgr.dll	7.0.6000.16414
%windir%\system32\Ie4uinit.exe	7.0.6000.16414
%windir%\system32\Ieakeng.dll	7.0.6000.16414
%windir%\system32\Ieaksie.dll	7.0.6000.16414
%windir%\system32\Ieakui.dll	7.0.6000.16414
%windir%\system32\Ieapfltr.dll	7.0.5825.0
%windir%\system32\Iedkcs32.dll	17.0.6000.16414
%windir%\system32\Ieframe.dll	7.0.6000.16414
%windir%\system32\Ieframe.dll.mui	7.0.6000.16414
%windir%\system32\Iernonce.dll	7.0.6000.16414
%windir%\system32\Iertutil.dll	7.0.6000.16414
%windir%\system32\Ieudinit.exe	7.0.6000.16414
%ProgramFiles%\Internet Explorer\Iexplore.exe	7.0.6000.16414
%windir%\system32\Inetcpl.cpl	7.0.6000.16414
%windir%\system32\Jsproxy.dll	7.0.6000.16414
%windir%\system32\Msfeeds.dll	7.0.6000.16414
%windir%\system32\Msfeedsbs.dll	7.0.6000.16414
%windir%\system32\Mshtml.dll	7.0.6000.16414
%windir%\system32\Mshtmled.dll	7.0.6000.16414
%windir%\system32\Msrating.dll	7.0.6000.16414
%windir%\system32\Mstime.dll	7.0.6000.16414
%windir%\system32\Occache.dll	7.0.6000.16414
%windir%\system32\Url.dll	7.0.6000.16414
%windir%\system32\Urlmon.dll	7.0.6000.16414
%windir%\system32\Webcheck.dll	7.0.6000.16414
%windir%\system32\Wininet.dll	7.0.6000.16414

Registry changes

Registry Path	Key Name	Key Value
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB928090-IE7		-2

Patch Mgmt Features

Desktop Mgmt Features

Forums

Disclaimer: This webpage is intended to provide you information about patch announcements for certain specific software products. The information is provided "As Is" without warranty of any kind. The links provided point to pages on the vendors' websites. You can get more information by clicking the links to visit the relevant pages on the vendors' websites. Desktop Central is NOT endorsed by the vendors of the software products.